Malicious code in verbal-coffee-swan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e3248299f353b359f54950b7f642e3430c8abb8e87d4f0c5b261a0e6f5dda0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in wonderful-amber-yak (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35801713847ad0db824e716b8ed1d7aa967f502740ba840824ff300da8247927 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in puny-purple-toucan (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a48cbf10f58aabd3749f949ad7013330b7d21cbc0451570790c9ada9791b7be9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in expensive-yellow-quail (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3c2334f25fa44cad456c8eb973f0e3e580bc180454784642cf3fc9f8943c291d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55772

Malicious code in automatic-crimson-gopher npm...

Malicious code in wonderful-apricot-buzzard (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d37331455abec78185d3395a732801e45dfc44e8088b774b5ba8afe1371b203 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sorry-amethyst-chinchilla (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f9f8cc503fd0df600266edbf438a3bb1c19fbac142131b7489d93bed5595e7e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in vast-aqua-hamster (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c666e60a4f3df2b6b616bfb58c02f6c602c2fbe3d90e16bc62ddd7324bbd0916 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in spotty-salmon-anglerfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector acab7b2920e292373488cf3ca9aa3c911a9636a0260ff361be50573523c8c360 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-55767

Malicious code in automatic-scarlet-narwhal npm...

Malicious code in dependent-harlequin-wren (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 676711fe202e1319cfb75ca7dc1331b2852b419e2a28f35e65c7ed85fba08d16 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in damaged-black-mosquito (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7908abfb5d588a21489e07daf34db547bdf9e488d2f5671af6b0e9c310468eca This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in ministerial-blush-flyingfish (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57ff0093a820d6f6691e64da68e8b8ce039cd1d7ab3ed8ff114a2b07ceef24b4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in underground-tan-landfowl (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8509cc110f018c24a34684c5420f29e8c875ce1fcc86e8e29e43e0abfbf7e5c9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in liquid-gray-booby (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01d834d91667d7e0be6a27fc68abdee1ce8dd540758dbe13576e46d15f96892c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in quantumquill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fd030be612a08de861be346ecd8482e4be029b18a5207879a5af144d9387274b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in dynamic-amaranth-planarian (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55f97e59e11d882fec97c81887ccb9983f47cd319474dfff85f8e9fd4abfd099 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in unable-emerald-mastodon (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4433df00a1a0d7f70f240b5cca8ab6ca0c1d9e7f5ffcb2074a121366cf76ff93 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in changing-violet-crawdad (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d968826191b748111afc5773bab1e85cf2fe63cf5fb1cf891708c6fc73128f90 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in abundant-azure-tick (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 38c4b42d74498f314fe1a7e89097f1ae108339e5eddeb9a45777953b4fa63af4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...